Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DA073DA2CD011F1B891AFD7DAE4EC9C.roa
File: 0DA073DA2CD011F1B891AFD7DAE4EC9C.roa (raw, json)
Hash identifier: EZZcgstUB/FvFD9O0RrgYUyLjBACF3qBcsJPkAGiDdg=
Subject key identifier: 0F:D8:D5:1B:7D:01:36:15:26:0A:F2:CC:6A:76:39:6F:74:23:54:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A8D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DA073DA2CD011F1B891AFD7DAE4EC9C.roa
Signing time: Tue 31 Mar 2026 07:05:52 +0000
ROA not before: Tue 31 Mar 2026 07:05:47 +0000
ROA not after: Thu 04 Jun 2026 07:05:47 +0000
asID: 21859
IP address blocks: 156.252.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 Apr 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108761 (0x1a8d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 31 07:05:47 2026 GMT
Not After : Jun 4 07:05:47 2026 GMT
Subject: CN=69cb7250-f47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:89:f6:9a:af:7d:7e:c6:df:ff:b2:e6:da:
e8:d9:78:d8:c0:0f:37:49:17:a9:ef:16:bf:f6:0b:
87:bb:8d:2f:80:78:ff:95:6c:13:f9:3b:48:06:9d:
91:e9:0d:72:2f:86:55:13:77:f3:00:89:bf:fa:6a:
85:0c:fa:da:e6:fe:e5:88:71:4b:3f:c8:17:62:fb:
62:99:d9:3e:16:f5:40:27:fc:fc:77:d0:41:1a:12:
30:d3:cf:d1:42:95:99:48:72:ba:1b:b9:db:9a:2e:
4d:c3:38:59:91:15:7b:aa:e6:95:c4:d7:56:e2:8e:
cb:99:3b:86:b5:7a:c4:2a:ec:8e:13:8b:6f:13:86:
3f:88:c6:93:3d:87:c7:d8:27:42:6a:a2:93:e9:3f:
c7:e8:41:84:72:0f:21:ab:c6:20:3e:72:35:66:b4:
31:52:77:03:2c:4e:29:73:d8:87:14:fc:d7:04:7b:
0f:1a:1b:5b:27:68:3f:ce:13:d9:39:03:32:60:b4:
de:ea:50:e0:2f:e9:4b:09:28:12:23:96:14:f3:5d:
23:a0:64:a0:5d:2f:18:9b:d1:d3:ce:bc:fe:8c:e6:
91:14:fd:65:05:1d:50:03:16:5c:9d:2a:ff:56:5b:
8c:4b:6e:1d:b7:1c:04:af:9d:aa:bf:98:41:0b:e3:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D8:D5:1B:7D:01:36:15:26:0A:F2:CC:6A:76:39:6F:74:23:54:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DA073DA2CD011F1B891AFD7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.29.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:86:c7:f6:74:25:7d:7c:3c:ff:ce:7a:1a:22:c9:52:bf:db:
a8:26:52:21:94:4f:79:e2:8b:a9:05:07:9d:a0:dc:55:a5:f8:
6c:eb:b9:5e:0d:6c:aa:30:b4:7d:ed:59:75:de:72:c5:fa:d7:
e8:62:ca:ac:a4:d3:5a:67:4f:d7:84:d8:89:9d:1e:2f:26:88:
40:45:a1:6e:b8:3e:6f:9e:06:99:00:bd:1c:29:75:86:bf:5e:
bf:78:7d:45:25:9d:44:a1:a3:7b:4f:49:aa:05:5e:c5:53:15:
b1:82:c6:86:be:ed:41:a0:d8:64:81:a3:2b:b2:95:d6:65:de:
dd:1c:a9:09:84:81:a7:4e:63:0d:1f:9e:e9:d1:d2:ba:f3:0c:
ee:29:83:47:ac:04:10:b3:f0:f2:06:f8:ce:f1:20:42:4a:b4:
6a:5a:8a:ba:14:f4:ef:a5:63:07:63:21:e1:01:a4:eb:b7:bb:
a5:19:8e:fe:cc:ca:3e:d7:e4:01:c1:94:03:3d:9e:f1:8b:af:
31:28:22:06:c6:a4:eb:15:d2:a7:57:28:a8:c0:2e:01:8a:80:
de:33:51:09:6b:cf:0e:32:db:32:cc:b4:55:16:39:0c:5d:3d:
73:a7:69:21:ae:22:b9:f6:ad:49:df:24:60:04:72:72:67:bc:
90:55:77:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 04:59:32 2026 by rpki-client